48002b7f801f461a23d4cdd123b087d79d481bd3e0d9b7e05a7c36faa2a113bb

General

Target
48002b7f801f461a23d4cdd123b087d79d481bd3e0d9b7e05a7c36faa2a113bb
Size 293KB
Sample241109-mecmes1rfs
SHA256 48002b7f801f461a23d4cdd123b087d79d481bd3e0d9b7e05a7c36faa2a113bb
MD5 13029feb4c803fb379e5352c4cc1278b
SHA1 1ec5c6a4c197c3a1d6a768860ff526ab093c1cce
SHA512 e0cd06d9a60abd077624ce541bacdb95e588da15ce1df743ba3c60b86dee1cd77d166254d19d0314865f7d955f330398c48eb0b7aa33dfe749b4f4f811576f21
SSDEEP 6144:st4ELrrMBa2I+QoWfyJqdkUV+Nuzbgwu:st4EHrMBf1RWfyJqdkNunn
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48002b7f801f461a23d4cdd123b087d79d481bd3e0d9b7e05a7c36faa2a113bb

File Explorer

48002b7f801f461a23d4cdd123b087d79d481bd3e0d9b7e05a7c36faa2a113bb

.exe 293KB

48002b7f801f461a23d4cdd123b087d79d481bd3e0d9b7e05a7c36faa2a113bb

IMPHASH fa2a2cc45b8202d88be58a4188cd7ca9
SHA256 48002b7f801f461a23d4cdd123b087d79d481bd3e0d9b7e05a7c36faa2a113bb
MD5 13029feb4c803fb379e5352c4cc1278b
SHA1 1ec5c6a4c197c3a1d6a768860ff526ab093c1cce
SHA512 e0cd06d9a60abd077624ce541bacdb95e588da15ce1df743ba3c60b86dee1cd77d166254d19d0314865f7d955f330398c48eb0b7aa33dfe749b4f4f811576f21
SSDEEP 6144:st4ELrrMBa2I+QoWfyJqdkUV+Nuzbgwu:st4EHrMBf1RWfyJqdkNunn
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

11231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hapivere\cikutaf.pdb

kernel32

GetLocaleInfoA SetComputerNameExA ConvertThreadToFiber ZombifyActCtx GetEnvironmentStringsW WaitForSingleObject SetVolumeMountPointW EnumCalendarInfoExW GetConsoleAliasesA TerminateThread GetProcessHandleCount GetVersionExW GetConsoleAliasW WriteConsoleInputW WriteConsoleW TerminateProcess ReplaceFileW FileTimeToSystemTime GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc HeapSize ResetEvent LocalAlloc GetModuleHandleA GetStringTypeW GlobalAddAtomW ResetWriteWatch HeapReAlloc HeapAlloc GetStartupInfoW RaiseException RtlUnwind GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount LoadLibraryA LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA

advapi32

AreAllAccessesGranted

Sharing

General

Malware Config

Signatures

File Explorer

48002b7f801f461a23d4cdd123b087d79d481bd3e0d9b7e05a7c36faa2a113bb

kernel32

advapi32

generic